oauth2-server/tests/resource/ResourceServerTest.php

<?php

use \Mockery as m;

class Resource_Server_test extends PHPUnit_Framework_TestCase
{
	private $session;

	public function setUp()
	{
        $this->session = M::mock('League\OAuth2\Server\Storage\SessionInterface');
	}

	private function returnDefault()
	{
		return new League\OAuth2\Server\Resource($this->session);
	}

	public function test_setRequest()
    {
        $s = $this->returnDefault();
        $request = new League\OAuth2\Server\Util\Request();
        $s->setRequest($request);

        $reflector = new ReflectionClass($s);
        $requestProperty = $reflector->getProperty('request');
        $requestProperty->setAccessible(true);
        $v = $requestProperty->getValue($s);

        $this->assertTrue($v instanceof League\OAuth2\Server\Util\RequestInterface);
    }

    public function test_getRequest()
    {
        $s = $this->returnDefault();
        $request = new League\OAuth2\Server\Util\Request();
        $s->setRequest($request);
        $v = $s->getRequest();

        $this->assertTrue($v instanceof League\OAuth2\Server\Util\RequestInterface);
    }

    public function test_getTokenKey()
    {
        $s = $this->returnDefault();
        $this->assertEquals('access_token', $s->getTokenKey());
    }

    public function test_setTokenKey()
    {
        $s = $this->returnDefault();
       	$s->setTokenKey('oauth_token');

        $reflector = new ReflectionClass($s);
        $requestProperty = $reflector->getProperty('tokenKey');
        $requestProperty->setAccessible(true);
        $v = $requestProperty->getValue($s);

        $this->assertEquals('oauth_token', $v);
    }

    public function test_getScopes()
    {
        $s = $this->returnDefault();
        $this->assertEquals(array(), $s->getScopes());
    }

    /**
     * @expectedException League\OAuth2\Server\Exception\InvalidAccessTokenException
     */
    public function test_determineAccessToken_missingToken()
    {
    	$_SERVER['HTTP_AUTHORIZATION'] = 'Bearer';
   		$request = new League\OAuth2\Server\Util\Request(array(), array(), array(), array(), $_SERVER);

    	$s = $this->returnDefault();
    	$s->setRequest($request);

    	$reflector = new ReflectionClass($s);
	    $method = $reflector->getMethod('determineAccessToken');
	    $method->setAccessible(true);

	    $method->invoke($s);
    }

    /**
     * @expectedException League\OAuth2\Server\Exception\InvalidAccessTokenException
     */
    public function test_determineAccessToken_brokenCurlRequest()
    {
        $_SERVER['HTTP_AUTHORIZATION'] = 'Bearer, Bearer abcdef';
        $request = new League\OAuth2\Server\Util\Request(array(), array(), array(), array(), $_SERVER);

        $s = $this->returnDefault();
        $s->setRequest($request);

        $reflector = new ReflectionClass($s);
        $method = $reflector->getMethod('determineAccessToken');
        $method->setAccessible(true);

        $method->invoke($s);
    }

    public function test_determineAccessToken_fromHeader()
    {
        $request = new League\OAuth2\Server\Util\Request();

        $requestReflector = new ReflectionClass($request);
        $param = $requestReflector->getProperty('headers');
        $param->setAccessible(true);
        $param->setValue($request, array(
            'Authorization' =>  'Bearer abcdef'
        ));
        $s = $this->returnDefault();
        $s->setRequest($request);

    	$reflector = new ReflectionClass($s);

	    $method = $reflector->getMethod('determineAccessToken');
	    $method->setAccessible(true);

	    $result = $method->invoke($s);

	    $this->assertEquals('abcdef', $result);
    }

    public function test_determineAccessToken_fromBrokenCurlHeader()
    {
        $request = new League\OAuth2\Server\Util\Request();

        $requestReflector = new ReflectionClass($request);
        $param = $requestReflector->getProperty('headers');
        $param->setAccessible(true);
        $param->setValue($request, array(
            'Authorization' =>  'Bearer abcdef, Bearer abcdef'
        ));
        $s = $this->returnDefault();
        $s->setRequest($request);

        $reflector = new ReflectionClass($s);

        $method = $reflector->getMethod('determineAccessToken');
        $method->setAccessible(true);

        $result = $method->invoke($s);

        $this->assertEquals('abcdef', $result);
    }

    public function test_determineAccessToken_fromMethod()
    {
    	$s = $this->returnDefault();

    	$_GET[$s->getTokenKey()] = 'abcdef';
    	$_SERVER['REQUEST_METHOD'] = 'get';

   		$request = new League\OAuth2\Server\Util\Request($_GET, array(), array(), array(), $_SERVER);
    	$s->setRequest($request);

    	$reflector = new ReflectionClass($s);
	    $method = $reflector->getMethod('determineAccessToken');
	    $method->setAccessible(true);

	    $result = $method->invoke($s);

	    $this->assertEquals('abcdef', $result);
    }

    /**
     * @expectedException League\OAuth2\Server\Exception\InvalidAccessTokenException
     */
    public function test_isValid_notValid()
    {
    	$this->session->shouldReceive('validateAccessToken')->andReturn(false);

    	$request = new League\OAuth2\Server\Util\Request();
        $requestReflector = new ReflectionClass($request);
        $param = $requestReflector->getProperty('headers');
        $param->setAccessible(true);
        $param->setValue($request, array(
            'Authorization' =>  'Bearer abcdef'
        ));
        $s = $this->returnDefault();
        $s->setRequest($request);

        $s->isValid();
    }

    public function test_isValid_valid()
    {
    	$this->session->shouldReceive('validateAccessToken')->andReturn(array(
    		'session_id'  =>	1,
    		'owner_type'  =>	'user',
    		'owner_id'    =>	123,
            'client_id' =>  'testapp'
    	));

    	$this->session->shouldReceive('getScopes')->andReturn(array(
            array('scope' =>  'foo'),
            array('scope' =>  'bar')
        ));

   		$request = new League\OAuth2\Server\Util\Request();
        $requestReflector = new ReflectionClass($request);
        $param = $requestReflector->getProperty('headers');
        $param->setAccessible(true);
        $param->setValue($request, array(
            'Authorization' =>  'Bearer abcdef'
        ));

        $s = $this->returnDefault();
        $s->setRequest($request);

    	$this->assertTrue($s->isValid());
    	$this->assertEquals(123, $s->getOwnerId());
    	$this->assertEquals('user', $s->getOwnerType());
    	$this->assertEquals('abcdef', $s->getAccessToken());
        $this->assertEquals('testapp', $s->getClientId());
    	$this->assertTrue($s->hasScope('foo'));
    	$this->assertTrue($s->hasScope('bar'));
    	$this->assertTrue($s->hasScope(array('foo', 'bar')));
    	$this->assertFalse($s->hasScope(array('foobar')));
    	$this->assertFalse($s->hasScope('foobar'));
    	$this->assertFalse($s->hasScope(new StdClass));
    }
}